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AMENDMENTS TO THE CLAIMS 



1. (Currently Amended) A computer-implemented method comprising: 

in response to a first Authentication, Authorization, and Accounting (AAA) server 

receiving , from a first network device, a request to authorize a client to access a 
network resource, 

said first AAA server obtaining an accounting record for the client from an 
external resource communicatively coupled to the first AAA server, 

said first AAA server authorizing said client to access the network resource based 
on said accounting record, and 

said first AAA server sendin g, to the first network device, a Remote 

Authentication Dial In User Service (RADIUS) protocol access accept 
message that includes the accounting record within the RADIUS access 
accept messaget-iCausing the accounting record to be logged on a second 
network device, and to be sent by the second network device to t a second 
AAA server receiving within a RADIUS start session message-feat 
includes the accounting record within the start session message; 

wherein the method is performed by one or more processors . 



2. (Canceled) 



3. (Previously Presented) A computer-implemented method as recited in Claim 1, further 
comprising obtaining the accounting record for the client from a Lightweight Directory 
Access Protocol directory. 

4. (Previously Presented) A computer-implemented method as recited in Claim 1, wherein 
the client is selected from the group consisting of a wireless network client, a wired 
network client, and a dial up client. 

5. (Previously Presented) A computer-implemented method as recited in Claim 1, wherein 
causing the accounting record to be logged comprises causing the accounting record to be 
logged on a dedicated logging device. 
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6. (Previously Presented) A computer-implemented method as recited in Claim 1, wherein 
causing the accounting record to be logged comprises causing the accounting record to be 
logged on an Authentication, Authorization, and Accounting server. 

7. (Currently Amended) A computer-implemented method as recited in Claim 1, wherein 
causing the accounting record to be logged comprises causing the accounting record to be 
logged on a third network device. 

8. (Previously Presented) A computer-implemented method as recited in Claim 1, wherein 
causing the accounting record to be logged comprises causing the accounting record to be 
logged with a session start log entry. 

9. (Previously Presented) A computer-implemented method as recited in Claim 1, wherein 
causing the accounting record to be logged comprises causing the accounting record to be 
logged with a session stop log entry. 

10. (Previously Presented) A computer-implemented method as recited in Claim 1, wherein 
the accounting record comprises a handle to a second accounting record. 

11. (Previously Presented) A computer-implemented method as recited in Claim 10, further 
comprising: 

retrieving the second accounting record using the handle to the second accounting record; 
and 

causing the second accounting record to be logged. 

12. (Currently Amended) A computer-implemented method as recited in Claim 1, wherein 
the said first AAA server sending the accounting record further comprises said first AAA 
server sending data of said portion as a plurality of attribute-value pairs in said access 
accept message. 

13-17. (Canceled) 
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18. (Currently Amended) A computer-readable non-transitory storage medium storing 

instructions which, when executed by one or more processors, causes cause the one or 
more processors to perform: 

in response to a first Authentication, Authorization, and Accounting (AAA) server 

receiving , from a first network device, a request to authorize a client to access a 
network resource, 

said first AAA server obtaining an accounting record for the client from an 
external resource communicatively coupled to the first AAA server, 

said first AAA server authorizing said client to access the network resource based 
on said accounting record, and 

said first AAA server sending , to the first network device, a Remote 

Authentication Dial In User Service (RADIUS) protocol access accept 
message that includes the accounting record within the RADIUS access 
accept messaget-_ ! _causing the accounting record to be logged on a second 
network device, and to be sent by the second network device to 7 a second 
AAA server receiving within a RADIUS start session message-that 
includes the accounting record within the start session message . 



19. (Canceled) 



20. (Currently Amended) A computer-readable storage medium as recited in Claim 18 and 
storing instructions which, when executed by one or more processors, causes- cause the 
one or more processors to perform: 

obtaining the accounting record for the client from a Lightweight Directory Access 
Protocol directory. 



21. (Previously Presented) A computer-readable storage medium as recited in Claim 18, 
wherein the client is selected from the group consisting of a wireless network client, a 
wired network client, and a dial up client. 

22. (Previously Presented) A computer-readable storage medium as recited in Claim 18, 
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wherein the instructions for causing the accounting record to be logged comprise 
instructions for causing the accounting record to be logged on a dedicated logging device. 

23. (Previously Presented) A computer-readable storage medium as recited in Claim 18, 
wherein the instructions for causing the accounting record to be logged comprise 
instructions for causing the accounting record to be logged on an Authentication, 
Authorization, and Accounting server. 

24. (Currently Amended) A computer-readable storage medium as recited in Claim 18, 
wherein the instructions for causing the accounting record to be logged comprise 
instructions for causing the accounting record to be logged on a third network device. 

25. (Previously Presented) A computer-readable storage medium as recited in Claim 18, 
wherein the instructions for causing the accounting record to be logged comprise 
instructions for causing the accounting record to be logged with a session start log entry. 

26. (Previously Presented) A computer-readable storage medium as recited in Claim 18, 
wherein the instructions for causing the accounting record to be logged comprise 
instructions for causing the accounting record to be logged with a session stop log entry. 

27. (Previously Presented) A computer-readable storage medium as recited in Claim 18, 
wherein the accounting record comprises a handle to a second accounting record. 

28. (Currently Amended) A computer-readable storage medium as recited in Claim 27 and 
storing instructions which, when executed by one or more processors, causes- cause the 
one or more processors to perform: 

retrieving the second accounting record using the handle to the second accounting record; 
and 

causing the second accounting record to be logged. 

29. (Currently Amended) A computer-readable storage medium as recited in Claim 18, 
wherein the instructions for said first AAA server sending the accounting record further 
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comprise instructions for said first AAA server sending data of said portion as a plurality 
of attribute- value pairs in said access accept message. 

30-36. (Canceled) 

37. (Currently Amended) A computer-implemented method as recited in Claim 1, wherein 
said first AAA server and said second AAA server are the same Authentication, 
Authorization, and Accounting (AAA) server. 

38. (Currently Amended) A computer-implemented method as recited in Claim 1, wherein 
said first AAA server and said second AAA server are different load balanced 
Authentication, Authorization, and Accounting servers that are both configured to 
implement the Remote Authentication Dial In User Service protocol (RADIUS) network 
protocol. 

39. (Canceled) 

40. (Canceled) 

41. (Currently Amended) A computer-readable storage medium as recited in Claim 18, 
wherein said first AAA server and said second AAA server are the same Authentication, 
Authorization, and Accounting (AAA) server. 

42. (Currently Amended) A computer-readable storage medium as recited in Claim 18, 
wherein said first AAA server and said second AAA server are different load balanced 
Authentication, Authorization, and Accounting servers that are both configured to 
implement the Remote Authentication Dial In User Service protocol (RADIUS) network 
protocol. 

43. (Canceled) 

44. (Previously Presented) The computer- implemented method of Claim 10, wherein the 
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handle to the second accounting record comprises an identifier of the second accounting 
record that uniquely identifies the second accounting record from among a plurality of 
accounting records. 

45. (Currently Amended) The computer-implemented method of Claim 44, wherein the 
identifier of the second accounting record comprises one or more of an-internet protocol 
address addresses associated with the client, an internet protocol address associated with 
the first or second Authentication, Authorization, and Accounting (AAA) server, or a 
random string. 

46. (Currently Amended) The computer- readable storage medium of Claim 18, wherein the 
instructions for said first AAA server sending a Remote Authentication Dial In User 
Service protocol (RADIUS) access accept message that includes the accounting record 
further comprise instructions for said first AAA server sending the portion in RADIUS 
Class Attributes or RADIUS Vendor Specific Attributes. 

47. (Previously Presented) The computer-readable storage medium of Claim 27, wherein the 
handle to the second accounting record comprises an identifier of the second accounting 
record that uniquely identifies the second accounting record from among a plurality of 
accounting records. 

48. (Currently Amended) The computer- readable storage medium of Claim 47, wherein the 
identifier of the second accounting record comprises one or more of an-internet protocol 
address addresses associated with the client, an internet protocol address associated with 
the first or second Authentication, Authorization, and Accounting (AAA) server, or a 
random string. 
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